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AMENDMENTS TO THE CLAIMS 

Please cancel claims 1-11, 17-27, 33-39, and 43-48. Please amend claims 12, 14-15, 28- 
32, and 40. Please add new claims 49-79. Claims 13, and 41-42 remain unchanged. 

Claims 1-11 (canceled) 

12. (currently amended) A method for regulating access by a first process to a first data 
location on a storage device, comprising: 

receiving from the first process a request to access the first data location on a storage 
device , the request comprising a first set of information adapted to identify the first data location 
and a second set of information adapted to identify the first process, the second set of 
information adapted to be compared with third information, the third information being adapted 
to identify the access rights of the first process, the third set of information being associated with 
the storage device. 

comparing the second set of information with the third information, 

granting access to the first data location if the second set of information matches the third 
set of information, and 

denying access to the first data location if the second set of information does not match 
the third set of information. 

13. (original) The method of claim 12, wherein the first data location contains information 
adapted to identify the access rights of a second process, further comprising disallowing the 
second process access to a second data location on the storage device by changing data contained 
in the first data location. 

14. (currently amended) The method of claim 12, wherein the third set of information is 
persistent. 

15. (currently amended) The method of claim 12, wherein the storage device is a first 
storage device and the third set of information is stored in a second storage device. 
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16. (original) The method of claim 12, wherein the second storage device is a memory. 
Claims 17-27 (canceled) 

28. (currently amended) A computer program product that includes a medium useable by a 
processor, the medium having stored thereon a sequence of instructions which, when executed 
by said processor, causes said processor to execute a method for regulating access by a first 
process to a first data location on a storage device, comprising: 

receiving from the first process a request to access the first data location, the request 
comprising a first set of information adapted to identify the first data location and a second set of 
information adapted to identify the first process, the second set of information adapted to be 
compared with third set of information, the third set of information being adapted to identify the 
access rights of the first process, the third set of information being associated with the storage 
device. 

comparing the second set of information with the third set of information, 

granting access to the first data location if the second set of information matches the third 
set of information, and 

denying access to the first data location if the second set of information does not match 
the third set of information. 

29. (currently amended) The m e thod computer program product of claim 28, wherein the 
first data location contains information adapted to identify the access rights of a second process, 
further comprising disallowing the second process access to a second data location on the storage 
device by changing data contained in the first data location. 

30. (currently amended) The method computer program product of claim 28, wherein the 
third set of information is persistent. 

3 1 . (currently amended) The m e thod computer program product of claim 28, wherein the 
storage device is a first storage device and the third set of information is stored in a second 
storage device. 
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32. (currently amended) The m e thod computer program product of claim 28, wherein the 
second storage device is a memory. 

Claims 33-39 (canceled) 

40. (currently amended) A system for regulating access by a first process to a first data 
location on a storage device, comprising: 

an access request receiver adapted to receive an access request from a requestor, the 
access request comprising a first set of information adapted to identify the first data location and 
a second set of information adapted to identify the first process, the second set of information 
adapted to be compared with a third set of information, the third set of information being adapted 
to identify access rights of the first process, the third set of information being associated with the 
storage device, 

a key fetcher adapted to locate and retrieve the third set of information, 

a key comparer adapted to compare the second set of information with the third set of 
information, generate a comparison success if the second set of information matches the third set 
of information, and generate a comparison failure if the second set of information does not match 
the third set of information, 

a comparison success processor adapted to respond to the comparison success by taking a 
success action, and 

a comparison failure processor adapted to respond to the comparison failure by taking a 
failure action. 

41 . (previously added) The system of claim 40, wherein the success action comprises 
granting the first process access to the first data location. 

42. (previously added) The system of claim 40, wherein the failure action comprises denying 
the first process access to the first data location. 

Claims 43-48 (canceled) 
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49. (new) The method of claim 12, wherein the first process comprises multiple processes. 

50. (new) The method of claim 12, wherein the request further comprises additional sets of 
information adapted to identify the access rights of the first process, further comprising 
processing the additional sets of information to determine access rights. 

51 . (new) The method of claim 50, further comprising granting access to the first data 
location when both the results of processing said additional sets of information, and the results of 
comparing the second set of information with the third set of information are successful. 

52. (new) The method of claim 50, further comprising denying access to the first data 
location when either the results of processing said additional sets of information, or the results of 
comparing of the second set of information with the third set of information are failure. 

53. (new) The method of claim 12, wherein said request to access the first data location is a 
data output request. 

54. (new) The method of claim 12, wherein said request to access the first data location is a 
data input request. 

55. (new) The method of claim 12, wherein said request to access the first data location is a 
access-blocking request. 

56. (new) The method of claim 13 wherein the step of disallowing is initiated by the first 
process. 

57. (new) The method of claim 13 wherein the step of disallowing is initiated by the storage 
device. 

58. (new) The method of claim 13 wherein changing data in the first data location further 
comprises changing the data to a pre-defined value. 

59. (new) The method of claim 13, wherein the request further comprises information 
adapted to identify the access rights of a second process to multiple storage devices, further 
comprising disallowing the second process access to said multiple storage devices. 
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60. (new) The computer program product of claim 28, wherein the first process comprises 
multiple processes. 

61 . (new) The computer program product of claim 28, wherein the request further comprises 
additional sets of information adapted to identify the access rights of the first process, further 
comprising processing the additional sets of information to determine access rights. 

62. (new) The computer program product of claim 61, further comprising granting access to 
the first data location when both the results of processing said additional sets of information, and 
the results of comparing the second set of information with the third set of information are 
successful. 

63. (new) The computer program product of claim 61, further comprising denying access to 
the first data location when either the results of processing said additional sets of information, or 
the results of comparing of the second set of information with the third set of information are 
failure. 

64. (new) The computer program product of claim 28, wherein said request to access the 
first data location is a data output request. 

65. (new) The computer program product of claim 28, wherein said request to access the 
first data location is a data input request. 

66. (new) The computer program product of claim 28, wherein said request to access the 
first data location is a access-blocking request. 

67. (new) The computer program product of claim 29 wherein the step of disallowing is 
initiated by the first process. 

68. (new) The computer program product of claim 29 wherein the step of disallowing is 
initiated by the storage device. 

69. (new) The computer program product of claim 29 wherein changing data in the first data 
location further comprises changing the data to a pre-defined value. 
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70. (new) The computer program product of claim 29, wherein the request further comprises 
information adapted to identify the access rights of a second process to multiple storage devices, 
further comprising disallowing the second process access to said multiple storage devices. 

7 1 . (new) The system of claim 40, wherein the first process comprises multiple processes. 

72. (new) The system of claim 40, wherein the access request further comprises additional 
sets of information adapted to identify the first process. 

73 . (new) The system of claim 72, wherein the key comparer is further adapted to compare 
the additional sets of information to the third set of information, 

generate d comparison success if both the additional sets of information match the third 
set of information, and, the second set of information match the third set of information, and 

generate a comparison failure if either the additional sets of information do not match the 
third set of information or if the second set of information does not match the third set of 
information. 

74. (new) The system of claim 40, wherein the first data location contains information 
adapted to identify the access rights of a second process , further comprising a key changer 
adapted to prevent the second process access to a second storage location by changing the data 
contained in the first data location. 

75. (new) The system of claim 74, wherein the key changer changes the data in the first data 
location to a pre-defined value. 

76. (new) The system of claim 74, wherein the first data location contains information 
adapted to identify the access rights of a second process to multiple storage locations, the key 
changer is further adapted to prevent the second process access to multiple storage locations by 
changing the data contained in multiple data locations. 

77. (new) The system of claim 40, wherein said request to access the first data location is a 
data output request. 
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78. (new) The system of claim 40, wherein said request to access the first data location is a 
data input request. 

79. (new) The system of claim 40, wherein said request to access the first data location is a 
access-blocking request. 
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